Privacy Policy
Last updated: October 1, 2026
This page explains what personal data this website (besianshala.com) and the apps I make collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is Besian Shala (Italy), the developer behind this site and its apps. For any privacy request, please use the contact form.
2. This website
No tracking, no ad cookies
This website does not use advertising or tracking cookies, and there is no cookie banner because no consent-requiring cookies are set. We use privacy-friendly, cookieless analytics that count anonymous page views without profiling you.
Contact form
If you use the contact form, the email address and message you submit are processed on our behalf by Formspree (Formspree, Inc.), which forwards your message to us. We use this information only to read and reply to you. Please see Formspree's own privacy policy for how they handle submissions. As Formspree is based in the United States, your message may be processed outside the EU under appropriate safeguards.
Server logs
Our hosting provider may keep standard technical logs (IP address, timestamp, requested page) for security and to keep the site running. These are not used to identify or profile you.
3. The apps
The apps I make (such as Toggle Music) run on your Mac. They do not transmit your files, activity, or personal data to us or to any third party. Where an app needs access to your data, it works locally on your device: for example, Toggle Music reads your Apple Music library through Apple's MusicKit framework to display and play your music. If you connect Spotify, it signs you in through your browser and keeps the resulting authorization token in the macOS Keychain on your Mac; it browses your library through Spotify's API and plays through the Spotify desktop app. Only the music service you connect receives this data, never us.
To let you know when a new version is available, an app may periodically request a small version file from its update server. This request is anonymous and does not contain personal information beyond what any standard web request carries, such as your IP address, which is not stored for tracking purposes.
4. Legal basis
- Legitimate interest: to reply to messages you send us and to keep the website and update service secure and functioning (Art. 6(1)(f) GDPR).
5. How long we keep data
Contact-form messages are kept only as long as needed to handle your request and any follow-up. You can ask us to delete data we control that is not subject to a legal retention obligation.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these, use the contact form. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).
7. Changes
We may update this policy. The "last updated" date above always reflects the current version.
← Home